Proposed British Digital Information & Smart Data Bill

The new UK government used the recent King’s Speech upon the opening of Parliament to announce a proposal for a new Digital Information and Smart Data Bill (the “Bill”). 
 
The proposed Bill builds on the legacy of the Data Protection and Digital Innovation Bill (“DPDI Bill”) that was discussed extensively in the previous Parliamentary session (but which failed to become law prior to the dissolution of Parliament prior to the July 2024 UK general election) by intending to lay a baseline for a new era of data governance within the UK. 

Background

The Bill follows on the heels of the DPDI Bill, which fell away in the parliamentary wash-up prior to the general election. The DPDI intended to update the UK’s data protection framework, including establishing a statutory regime for Smart Data and Digital ID (being digital identity verification frameworks). The DPDI Bill had received wide-ranging legislative scrutiny prior in the previous parliamentary session and was anticipated to become law. 

Accordingly, the proposed Bill will amend and update the UK’s data protection regime, although many of the concepts that the Bill is likely to cover are taken directly from the defunct DPDI Bill. The key aspects that are to be covered in the Bill are set out below. 

Digital Verification Services

As originally proposed in the DPDI Bill, the Bill will seek to establish digital verification services in the UK, empowering individuals and businesses to embrace secure digital identities. This is intended to create added convenience in everyday life such as assisting with age verification checks, pre-employment checks and moving house, and have broad applicability across a range of sectors. Digital identities are expected to foster economic growth through adding efficiency to common time-consuming processes. 

National Underground Asset Register (NUAR)

The Bill also introduces the NUAR; a digital map intended to revolutionise infrastructure management by providing planners, operators and engineers with instant access to data on the pipes, cables and other network assets functioning underground. This is intended to enable efficient maintenance, repair and operation of such items.  

Smart Data Schemes: Unlocking Insights Across Sectors

Smart Data Schemes will be introduced through the Bill, which enable the secure sharing of customer data through authorised third party providers. This puts forward a wide potential of opportunities, such as seamless financial management across a range of customer accounts. 

Revising The Digital Economy Act 

The Bill will strengthen public services through revisions to the Digital Economy Act, permitting the Government to share data about businesses that use public services. One of the ultimate intentions here is to eventually move to an electronic system for birth and death registrations, thus streamlining and developing efficiencies in this area. 

Strengthening The ICO

Under the Bill, the ICO (the UK’s data protection regulator) will receive enhanced regulatory powers, which will come alongside the clarification of data laws that are currently obstructing the safe development and deployment of new technologies. 

Who Will The Bill Affect?

The key businesses affected by the Bill will be those operating in the digital verification and identity sector, or users of these services (for example organisations in the financial services sector). The developments put forward by the Bill will act as a core foundation for establishing and regulating digital identity verification technologies within the UK.

The Smart Data Schemes proposed by the Bill will act as a legal backbone for data portability programmes, and will particularly be useful for those working in open banking through the enhancement of customer data with contextual ‘business’ data, thus improving decision making in the open banking landscape. 

Key Implications

If enacted in line with the Government’s announced intentions, the Bill will be a pivotal move for the UK’s data protection landscape, particularly in respect of its reforms around Digital Verification Service (the process of confirming an online identity). The King’s Speech indicated that the government estimates these reforms to produce £600 million in economic benefit annually. 

The Bill is intended to nurture and develop the implementation of digital technologies within the UK, thus boosting the UK’s reputation as a global leader in respect of technological development and related legislative provisions. Further developments and insights on the Bill will be revealed in the coming months and potentially-affected businesses should be alive to this evolution.

David Varney is Partner at independent UK law firm Burges Salmon  

Image: 

You Might Also Read: 

Taming Aggressive Algorithms:


If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Student Who Sold Cyber Attack Software Is Jailed
The CrowdStrike Incident Means Companies Must Review Their Cloud Strategies »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Zayo

Zayo

Zayo is a leading global bandwidth infrastructure services provider for high-performance connectivity, secure colocation and flexible cloud services.

Kaseya

Kaseya

Kaseya is a premier provider of unified IT management and security software for managed service providers (MSPs) and small to medium-sized businesses (SMBS).

DataLocker

DataLocker

DataLocker offers both hardware based external storage and software based cloud storage encryption solutions.

Cyberwrite

Cyberwrite

Cyberwrite was founded to provide underwriters around the world a unique and innovative Cyber Underwriting platform.

Sumo Logic

Sumo Logic

Sumo Logic simplifies how you collect and analyze machine data so that you can gain deep visibility across your full application and infrastructure stack.

Indusface

Indusface

Indusface offers best website security, web application firewall and SSL certificate to keep your online business much safer.

Infosistem

Infosistem

Infosistem is a Croatian ICT company with extensive expertise and experience in enterprise and SMB ICT projects and solutions.

National Authority for Electronic Certification and Cyber Security (AKCESK)

National Authority for Electronic Certification and Cyber Security (AKCESK)

AKCESK ensures security for trusted services, in particular reliability and security in electronic transactions between citizens, businesses and public authorities.

Asvin

Asvin

Asvin provides secure update management and delivery for Internet of Things - IoT Edge devices.

Specops Software

Specops Software

Specops Software is a leading password management and authentication solution vendor.

US Army Cyber Command (ARCYBER)

US Army Cyber Command (ARCYBER)

US Army’s Cyber Command (ARCYBER) is engaged in the real-world cyberspace fight today, against near-peer adversaries, ISIS, and other global cyber threats.

Probity

Probity

Probity Inc. is a certified software development and systems engineering company, providing support to federal government and national defense related clients.

VulnCheck

VulnCheck

VulnCheck helps organizations outpace adversaries with vulnerability intelligence that predicts avenues of attack with speed and accuracy.

Agile Defense

Agile Defense

Agile Defense is an Information Technology services provider, delivering leading-edge Digital Transformation solutions to the Federal Government.

Aim Security

Aim Security

Aim empowers enterprises to unlock the full potential of GenAI technology without compromising security. GenAI makes business better - Aim makes GenAI secure.

CIP Cyber

CIP Cyber

CIP Cyber is an online learning community with a mission of connecting, training, and certifying cybersecurity professionals to protect critical infrastructure.